$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/12c649e9-815b-3351-8b11-f9a675702d6c.roa File: 12c649e9-815b-3351-8b11-f9a675702d6c.roa (raw, json) Hash identifier: 2KZSRysJu+0tu5X+MYd6LhQ7v5Tu1JQperKTfC6/Qq8= Subject key identifier: 98:B2:33:C4:49:68:F8:28:C5:00:E2:33:FF:91:8E:32:C5:D4:02:B3 Certificate issuer: /CN=086f01d4-c895-4205-9b95-29c50942197b Certificate serial: 010D0C9F4328584D6B4B57F6DADE4A3A71BF0280 Authority key identifier: E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/12c649e9-815b-3351-8b11-f9a675702d6c.roa Signing time: Mon 06 Apr 2026 18:24:53 +0000 ROA not before: Mon 06 Apr 2026 18:24:53 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 7050 IP address blocks: 129.89.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6b:4b:57:f6:da:de:4a:3a:71:bf:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=086f01d4-c895-4205-9b95-29c50942197b Validity Not Before: Apr 6 18:24:53 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=5b6e2bca-991f-437b-acca-39f9f3d473a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a9:c4:2f:48:a8:61:68:e9:8a:f6:89:a8:e6: b3:78:09:a7:df:e5:12:c9:3e:71:69:ca:18:54:3a: f8:9d:23:a8:42:3b:87:75:39:c6:c3:7e:47:c9:d3: bf:56:4b:af:99:2a:da:82:55:ea:1d:d3:c2:ca:a7: 19:a9:18:fe:16:3d:55:23:13:2e:25:3c:98:6e:a8: 52:cf:c7:ba:00:2b:ee:bd:33:18:d8:61:41:a3:61: a1:16:09:95:bd:5b:d4:14:30:78:0b:92:7d:b2:88: ca:69:e8:25:61:d9:a5:e0:ca:03:6b:b1:c2:3a:80: a8:03:c2:a8:61:39:c5:68:93:73:76:36:1c:8d:7c: a7:cb:06:84:e2:10:71:de:b2:8e:8e:01:49:72:61: cc:37:b4:85:b0:a5:9f:2c:a5:f7:d8:35:ef:77:87: 25:2c:34:1a:0b:01:3c:67:c8:9a:dd:f9:68:04:f4: 10:a8:14:75:0d:2d:a2:47:e0:44:2a:fb:b9:c8:1a: f7:ac:e7:96:c6:44:b8:81:db:98:0e:7c:29:e1:79: 7f:7f:c9:ea:5e:8e:c1:a8:96:3d:0e:30:95:27:e1: 85:68:90:07:a1:5d:1d:25:9e:5e:c0:00:91:75:6c: 73:e5:6a:7f:7a:f4:e7:e5:87:3b:d6:89:d9:3f:ff: 4e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B2:33:C4:49:68:F8:28:C5:00:E2:33:FF:91:8E:32:C5:D4:02:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/12c649e9-815b-3351-8b11-f9a675702d6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b/086f01d4-c895-4205-9b95-29c50942197b.crl X509v3 Authority Key Identifier: keyid:E4:5D:AB:DE:F1:67:DE:86:4B:CE:19:B3:B7:AF:B8:C8:11:19:D4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/086f01d4-c895-4205-9b95-29c50942197b.cer sbgp-ipAddrBlock: critical IPv4: 129.89.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:5d:a3:bc:12:b3:d9:5c:af:4f:f3:7e:09:34:73:ed:c9:5f: 22:17:cf:4f:30:77:c2:69:15:25:18:a3:ae:e2:6c:b9:14:93: ca:16:e4:ff:bc:6c:2f:ad:ac:3a:ee:cb:b2:a3:23:ff:5d:18: 54:b5:9e:03:f0:23:b5:4d:7a:f8:90:63:7c:1f:6d:ef:ac:85: 4d:b9:d4:50:ea:d7:6f:b5:93:dd:6b:bd:91:1b:83:ab:f0:f5: 7a:e8:a0:c8:88:72:45:5d:b7:14:55:27:aa:1d:bd:85:d8:3c: ed:ab:35:f7:e0:f9:ca:d3:6f:8b:1e:58:cf:7d:7b:92:f3:65: f4:c0:eb:d5:f8:00:67:ce:e9:73:b3:74:8a:e2:0e:d8:4f:64: 20:ff:88:34:5c:ce:ce:81:9f:db:dd:63:76:37:1a:e1:23:42: a7:48:ee:e8:b6:6c:8f:4d:2e:04:0a:bf:3f:b5:fe:2f:a3:3d: 87:c5:05:35:7d:09:25:f3:01:36:59:be:b8:2f:4e:89:d7:95: b5:97:ce:e7:bc:02:a5:76:f4:31:70:55:41:20:0e:eb:41:11: 0d:a7:8e:44:09:16:1f:30:62:5a:a3:12:1f:1f:7b:52:3c:4a: b3:0e:5c:0f:0b:3d:9f:f2:7d:ba:d2:12:c8:dd:d8:78:66:e2: f0:0e:48:f1 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1rS1f22t5KOnG/AoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg2ZjAxZDQtYzg5NS00MjA1LTliOTUtMjljNTA5NDIx OTdiMB4XDTI2MDQwNjE4MjQ1M1oXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NWI2ZTJiY2EtOTkxZi00MzdiLWFjY2EtMzlmOWYzZDQ3M2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6nEL0ioYWjpivaJqOazeAmn3+USyT5xacoY VDr4nSOoQjuHdTnGw35HydO/VkuvmSraglXqHdPCyqcZqRj+Fj1VIxMuJTyYbqhS z8e6ACvuvTMY2GFBo2GhFgmVvVvUFDB4C5J9sojKaeglYdml4MoDa7HCOoCoA8Ko YTnFaJNzdjYcjXynywaE4hBx3rKOjgFJcmHMN7SFsKWfLKX32DXvd4clLDQaCwE8 Z8ia3floBPQQqBR1DS2iR+BEKvu5yBr3rOeWxkS4gduYDnwp4Xl/f8nqXo7BqJY9 DjCVJ+GFaJAHoV0dJZ5ewACRdWxz5Wp/evTn5Yc71onZP/9OtQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJiyM8RJaPgoxQDiM/+RjjLF1AKzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wODZm MDFkNC1jODk1LTQyMDUtOWI5NS0yOWM1MDk0MjE5N2IvMTJjNjQ5ZTktODE1Yi0z MzUxLThiMTEtZjlhNjc1NzAyZDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDg2ZjAxZDQtYzg5NS00MjA1LTli OTUtMjljNTA5NDIxOTdiLzA4NmYwMWQ0LWM4OTUtNDIwNS05Yjk1LTI5YzUwOTQy MTk3Yi5jcmwwHwYDVR0jBBgwFoAU5F2r3vFn3oZLzhmzt6+4yBEZ1BMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wODZmMDFkNC1jODk1LTQyMDUtOWI5NS0yOWM1 MDk0MjE5N2IuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgVkwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAdl2jvBKz2VyvT/N+CTRz7clfIhfPTzB3wmkVJRijruJsuRSTyhbk/7xs L62sOu7LsqMj/10YVLWeA/AjtU16+JBjfB9t76yFTbnUUOrXb7WT3Wu9kRuDq/D1 euigyIhyRV23FFUnqh29hdg87as19+D5ytNvix5Yz317kvNl9MDr1fgAZ87pc7N0 iuIO2E9kIP+INFzOzoGf291jdjca4SNCp0ju6LZsj00uBAq/P7X+L6M9h8UFNX0J JfMBNlm+uC9OideVtZfO57wCpXb0MXBVQSAO60ERDaeORAkWHzBiWqMSHx97UjxK sw5cDws9n/J9utISyN3YeGbi8A5I8Q== -----END CERTIFICATE-----Generated at Sat Apr 18 00:29:37 2026 by rpki-client